We claim: 

1 1 . A method for providing a user with access to multiple accounts using a common 

2 password which is valid for each of the multiple accounts, wherein each of the multiple accounts 

3 has associated with it a unique designated password, the method comprising: 

4 generating a designated password which is to be associated with at least one of the user's 

5 multiple accounts; 

6 receiving login information from the user for the at least one of the user's multiple 

7 accounts, wherein the login information includes a user ID belonging the user and the user's 

8 common password; and 

9 detennining if the user has provided valid login information based on a comparison 
iJO which takes into the account the user's ID, common password and the designated password 
P 1 1 generated for the at least one of the user's multiple accounts. 

M 

r\ 1 2. The method of claim 1 , wherein the designated password is generated by a hash function 

2 of the common password and some account-dependent information. 

01 

%1 1 3. The method of claim 2, further comprising: 

EI 2 forming a symmetric key from the results of the hash function. 

r% 

1 4. The method of claim 3, wherein the symmetric key is used to encrypt the random 

2 number. 

1 5. The method of claim 4, wherein the random number is encrypted via a symmetric 

2 encryption algorithm. 
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1 6. The method of claim 1 , wherein receiving login information from the user for at least one 

2 of the user's multiple accounts, wherein the login information includes a user ID and the user's 

3 common password includes: 

4 providing at least one input facility for the user to provide the user ID and common 

5 password. 

1 7. The method of claim 1 , wherein determining if the user has provided valid login 

2 information based on a comparison which takes into the account the user's ID, common 

3 password and the designated password generated for the at least one of the user's multiple 

4 accounts includes: 

5 performing a hash function upon the designated password; and 

6 comparing the results of the hash function upon the designated password with a 

7 corresponding stored result to determine if a match exists. 

1 8. The method of claim 7, further comprising: 

2 providing access to the at least one of the user's multiple accounts if a match exists. 

1 9. The method of claim 1 , wherein determining if the user has provided valid login 

2 information based on a comparison which takes into the account the user's ID, common 

3 password and the designated password generated for the at least one of the user's multiple 

4 accounts includes: 

5 calculating the designated password according to a password transform algorithm. 
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1 10. A method for providing access to multiple online accounts via a common password, the 

2 method comprising: 

3 receiving a common password associated with an online account; and 

4 determining if the universal password is valid for the associated online account based 

5 upon a designated password which was previously generated for the associated online account, 

6 wherein the designated password was previously generated based upon a password transform 

7 calculation. 

1 11. The method of claim 8, wherein the password transform calculation is based upon a user 

2 ID for the associated online account, the universal password, a server name and a random 

3 number. 
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I , j 1 12. The method of claim 9, wherein the password transform is represented by a text 

^ 2 conversion of the following hash function: 

5=?«S 

0 3 Hash(Ui + Pc + Si + Nr) 

r 4 

jr; 5 where Ui stands for a user ID, Pc for a common password, Si for a server name and Nr for a 

h' h 6 random number, 

~* 1 13. The method of claim 8, further comprising: 

2 generating a designated password for each of the multiple online accounts which is 

3 accessible via the common password. 
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1 14. A method for providing access to multiple Web accounts via a universal password which 

2 is valid for the multiple Web accounts, the method comprising: 

3 providing a designated password for each of the multiple Web accounts; 

4 receiving the universal password for access to at least one of the multiple Web accounts; 

5 determining if the universal password is valid based on the associated designated 

6 password for the at least one of the multiple Web accounts; and 

7 providing access to the at least one of the multiple Web accounts provided the universal 

8 password is valid. 

1 15. The method of claim 14, wherein the designated password is calculated for each of the 



2 multiple Web accounts based on a hash function which incorporates the universal password as an 

™ 3 input to the hash function. 

01 

\ j 1 1 6. The method of claim 1 5, wherein the hash function also incorporates a user ID and an 

2* 2 account server name as inputs to the hash function. 

q 1 17. The method of claim 1 5, wherein the hash function also incorporates a random as an 

£T 2 input to the hash function. 

CJ 1 18. The method of claim 1 4, wherein determining if the universal password is valid based on 

2 the associated designated password for the at least one of the multiple Web accounts includes: 

3 receiving a user ID; 

4 retrieving an encrypted random number based on the user ID; 

5 receiving the associated designated password; and 

6 comparing the received associated designated password with a corresponding saved 

7 designated password for the at least one of the multiple Web accounts. 
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19. The method of claim 14, further comprising: 

providing a new designated password for the at least one of the multiple Web accounts if 
requested. 

20. The method of claim 14, wherein providing a new designated password for the at least 
one of the multiple Web accounts if requested includes: 

generating a random number; and 

calculating the new designated password based on at least the universal password and the 
random number. 
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